| Port scan from Kerio Control [message #149722] |
Tue, 11 May 2021 09:28  |
jayqb
Messages: 1
Registered: May 2021
|
|
|
|
Hi, today I have found out strange event in security log. Kerio Control IPS has detected port scan coming from itself - source IP is the LAN IP of Kerio Control. Port scan was targeted at multiple workstations on the local network. Should I be worried ? The event does not repeat (at least for next 24 hours)
[10/May/2021 09:12:14] IPS: Port Scan, protocol: TCP, source: <Kerio Control LAN IP>, destination: <workstation #1 IP>, <workstation #7 IP>, <workstation #15 IP>, ..., ports: 51201, 51207, 60208, 60218, 51264, 51066, 51088, 51129, 54721, 51144, ... |
|
|
|
| Re: Port scan from Kerio Control [message #151573 is a reply to message #149722] |
Thu, 05 May 2022 14:32  |
llopez
Messages: 2
Registered: May 2022
|
|
|
|
I have the same problem, when reviewing the security logs, several port scans are shown from my kerio control to different destinations, this should not be normal. does anyone have an answer?
IPS: Port Scan, protocol: TCP, source: (mi kerio)xxx.xxxx.xxxx.xx, destination: 208.111.136.0, 200.55.184.78, 204.79.197.219, ..., ports: 62464, 11785, 11329, 63816, 80, 4989, 30615, 42665, 443, 58618, ...
|
|
|
|
|
|
Members
Search
Help
Register
Login
Home
